crys
Static task
static1
Behavioral task
behavioral1
Sample
c795b2e20d9d701a796b12acfd358459.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c795b2e20d9d701a796b12acfd358459.dll
Resource
win10v2004-20240226-en
General
-
Target
c795b2e20d9d701a796b12acfd358459
-
Size
4KB
-
MD5
c795b2e20d9d701a796b12acfd358459
-
SHA1
c731f43f0f20d219679b2eae1d3aec097b461f00
-
SHA256
3849a74154ebdeccd639403edc121e61cb320f21e3504e3d66208940954d09b8
-
SHA512
c1aa310e2ebade7331fc221b976ca0d0446f755ff2cc82e0ab1e0bbc7ddd6f55f8affa1afb41b2f12cbc78881ea402ad6415d953adfab74f2c5d0b2fd18d0651
-
SSDEEP
48:a5z4K+cmATmRYoRZCTJzJMncOiIgnmMUe:MTWnRZ0lJMncGVe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c795b2e20d9d701a796b12acfd358459
Files
-
c795b2e20d9d701a796b12acfd358459.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 521B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ